[Snort-users] Snort+flexresp and "raw socket for libnet"

Tudor Panaitescu tpanaitescu at ...2032...
Tue Jan 22 11:23:02 EST 2002

Hello fellow snorters,

I am trying to use the flexresp in snort and I am getting this error:

FATAL ERROR: ERROR: cannot open raw socket for libnet, exiting...

Architecture: RedHat 7.2 + kernel 2.4.17 + snort-plain+flexresp-1.8.3-5snort +
snort-1.8.3-5snort + libnet-1.0.2a-1snort. eth0 10.x.x.x in the internal
network, eth1 no IP address assigned but up, between the router & the firewall.

Everytime I try to modify a rule with ...; resp: rst_snd,icmp_all; etc. I get
the error mentioned above ...

What am I missing ? Any help would be appreciated ...

TIA and all the best,

More information about the Snort-users mailing list